StackRadar

CVE-2026-85091

High

Advisory

Published 3 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,605
of 17,792 indexed, latest versions
Container images
2,608
deployed by those charts
Fix available
2 of 5
affected packages

CVE-2026-85091 affecting package zlib 1.3.2-1

Carried by container images the latest versions of 2,605 of 17,792 indexed charts deploy, on 2,608 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.8.dfsg-2ubuntu4, 1:1.2.8.dfsg-2ubuntu4.1+22 more1:1.3.dfsg+really1.3.1-1+e22,513
zlibapk1.3-r2, 1.3.1-r4, 1.3.1-r5, 1.3.1-r6+6 more1.3.2.1_rc20260601-r094
rsyncdeb3.1.1-3ubuntu1.1, 3.1.1-3ubuntu1.2, 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1+8 moreno fix listed29
klibcdeb2.0.3-0ubuntu1, 2.0.3-0ubuntu1.14.04.3no fix listed7
zlibrpm1.3.1-1.azl3no fix listed1
OSV records
CGA-64hx-6x96-r8f7CGA-6ph6-75jp-484pDEBIAN-CVE-2026-85091UBUNTU-CVE-2026-85091AZL-99090ECHO-2e36-531c-37dd
Also known as
CGA-7955-fhww-9pv3, CGA-m46g-37hm-gpgh
Trending
Rank 30 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

2,605 by stars
ChartLatestAffected imagesRadar Score
argocdnicklasfrahm-argocdVerified publisher0.3.01 of 2See more

argocd nicklasfrahm-argocd 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

5,302
oneuptimeoneuptimeOfficialVerified publisher13.0.64 of 7See more

oneuptime oneuptime 13.0.6

4 of the 7 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.7c28b8916e10e
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
library/postgres:latest4ef4dbc939d6
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
oneuptime/probe:releasec5ef060a0bf3
zlib@1:1.2.13.dfsg-1
no fix listed
oneuptime/runner:releasebc4f82c54680
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

11,633
openclawopenclaw-helmVerified publisher1.5.402 of 2See more

openclaw openclaw-helm 1.5.40

2 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
chromedp/headless-shell:148.0.7778.97313ed7255ae1
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,696
prometheus-cloudwatch-exporterprometheus-communityVerified publisher0.28.21 of 1See more

prometheus-cloudwatch-exporter prometheus-community 0.28.2

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
prom/cloudwatch-exporter:v0.16.071c2e988af06
zlib@1:1.3.dfsg-3.1ubuntu2
no fix listed

Open the chart page →

3,437
stalwart-mailstalwart-mailVerified publisher2.0.101 of 1See more

stalwart-mail stalwart-mail 2.0.10

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.2074ca4f7f6885
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,425
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
rsync@3.1.2-2.1ubuntu1.1
zlib@1:1.2.11.dfsg-0ubuntu2
no fix listed
no fix listed

Open the chart page →

15,622
jellyfinutkuozdemirVerified publisher2.0.01 of 1See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
linuxserver/jellyfin:10.7.72427dde159a2
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed

Open the chart page →

7,932
camel-kcamel-kVerified publisher2.11.01 of 1See more

camel-k camel-k 2.11.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
apache/camel-k:2.11.0d173e7efe258
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

1,342
glasskube-operatorglasskubeOfficialVerified publisher0.12.21 of 3See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
glasskube/operator:0.12.2be5133100d63
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

11,997
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,385
milvusmilvus-helm5.0.282 of 4See more

milvus milvus-helm 5.0.28

2 of the 4 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
milvusdb/etcd:3.5.25-r1fededb2f2d63
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

10,809
prefect-serverprefectVerified publisher2026.9.141419102 of 2See more

prefect-server prefect 2026.9.14141910

2 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
zlib@1:1.2.13.dfsg-1
no fix listed
prefecthq/prefect:3.8.6-python3.11f518ebb9c353
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

5,573
rocketmqrocketmq12.6.01 of 2See more

rocketmq rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
apache/rocketmq:5.4.0319cd8a81ed1
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

6,410
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed

Open the chart page →

18,647
bitbucketatlassian-data-centerVerified publisher2.0.151 of 1See more

bitbucket atlassian-data-center 2.0.15

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
atlassian/bitbucket:10.2.705933f2b1cfd
zlib@1:1.3.dfsg-3.1ubuntu2.2
no fix listed

Open the chart page →

1,579
zookeepercloudpirates-zookeeperVerified publisher0.13.111 of 1See more

zookeeper cloudpirates-zookeeper 0.13.11

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/zookeeper:3.9.5cab8944a33a1
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

2,975
codefreshcodefresh-onpremOfficialVerified publisher2.12.144 of 42See more

codefresh codefresh-onprem 2.12.14

4 of the 42 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
zlib@1:1.2.13.dfsg-1
no fix listed
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
zlib@1:1.2.13.dfsg-1
no fix listed
bitnamilegacy/rabbitmq:4.1.39e635efba431
zlib@1:1.2.13.dfsg-1
no fix listed
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

15,119
contourcontour0.8.01 of 2See more

contour contour 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.38.4447f857a0146
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

1,531
apim3graviteeioVerified publisher4.12.192 of 4See more

apim3 graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
graviteeio/apim-management-api:4.12.19-debian27374522cd04
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

4,853
redisgroundhog2k2.4.71 of 1See more

redis groundhog2k 2.4.7

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

985
wordpressgroundhog2k0.16.41 of 1See more

wordpress groundhog2k 0.16.4

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
library/wordpress:7.1.0-apache5a93c470ae82
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

3,778
memcachedkubelauncherVerified publisher0.1.321 of 1See more

memcached kubelauncher 0.1.32

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/memcacheddigest-pinnedb599ca6b3ff3
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

650
mysqlkubelauncherVerified publisher0.4.41 of 1See more

mysql kubelauncher 0.4.4

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mysqldigest-pinnede9609bd50416
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

993
postgresqlkubelauncherVerified publisher0.4.31 of 1See more

postgresql kubelauncher 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/postgresqldigest-pinned1a27e11e5925
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

1,170
memgraphmemgraphVerified publisher1.0.71 of 2See more

memgraph memgraph 1.0.7

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
memgraph/memgraph:3.13.1bd3fe13228f4
zlib@1:1.3.dfsg-3.1ubuntu2.2
no fix listed

Open the chart page →

1,238
velero-uiotwldVerified publisher0.16.01 of 1See more

velero-ui otwld 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
otwld/velero-ui:0.10.31c228d9ef71b
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,362
stackstorm-hastackstormVerified publisher1.1.012 of 17See more

stackstorm-ha stackstorm 1.1.0

12 of the 17 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
rsync@3.1.3-8ubuntu0.7
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
no fix listed
stackstorm/st2api:3.86f56d239d280
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
stackstorm/st2auth:3.833ecfda16608
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
stackstorm/st2notifier:3.8f190a6212195
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
stackstorm/st2rulesengine:3.8259503496ff9
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
stackstorm/st2scheduler:3.8b1de2055c362
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
stackstorm/st2sensorcontainer:3.8b1a338f64773
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
stackstorm/st2stream:3.81c8904a3bf67
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
stackstorm/st2timersengine:3.81bf35bfaf00c
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
stackstorm/st2web:3.809989a26c8b7
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed
stackstorm/st2workflowengine:3.819fdfffdbba8
zlib@1:1.2.11.dfsg-2ubuntu1.5
no fix listed

Open the chart page →

97,160
supabasetokens-studioVerified publisher1.0.06 of 14See more

supabase tokens-studio 1.0.0

6 of the 14 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.26476cb08c816a
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
library/kong:3.8.0712e407b20ea
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
supabase/edge-runtime:v1.59.0eff9c554d649
zlib@1:1.2.13.dfsg-1
no fix listed
supabase/postgres-meta:v0.84.2d0a96973e9f1
zlib@1:1.2.13.dfsg-1
no fix listed
supabase/realtime:v2.33.8d207e6e23ad3
zlib@1:1.2.13.dfsg-1
no fix listed
supabase/studio:20241021-9f9b08326d8070c55e9
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

23,400
wekanwekanVerified publisher11.83.02 of 3See more

wekan wekan 11.83.0

2 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/wekan/ferretdb:latest6cb94aa01999
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
ghcr.io/wekan/wekan:v11.83137951e3fb40
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

1,635
renterdartur9010Verified publisher1.4.42 of 2See more

renterd artur9010 1.4.4

2 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/siafoundation/renterd:2.9.0e0334f124863
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

8,586
cloudbeaveravistoVerified publisher1.1.71 of 1See more

cloudbeaver avisto 1.1.7

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
dbeaver/cloudbeaver:26.1.287ab86d00f8c
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

1,824
budibasebudibase0.0.0-master3 of 7See more

budibase budibase 0.0.0-master

3 of the 7 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
budibase/database:2.1.0d90f656261c9
zlib@1:1.2.13.dfsg-1
no fix listed
budibase/proxy:3.41.38d780b6ee602
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
library/redis:latest298e5b3bc566
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed

Open the chart page →

10,981
csi-secrets-store-provider-azurecsi-secrets-store-provider-azureVerified publisher1.8.21 of 5See more

csi-secrets-store-provider-azure csi-secrets-store-provider-azure 1.8.2

1 of the 5 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.15.059b9d0348428
zlib@1.3.1-1.azl3
no fix listed

Open the chart page →

2,323
druiddruid-helmVerified publisher37.0.21 of 3See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,839
bitcoindfold0.3.21 of 2See more

bitcoind fold 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
thesisrobot/bitcoind:v23.016b368e4d52c
zlib@1:1.2.11.dfsg-2ubuntu9.1
no fix listed

Open the chart page →

3,504
cubestoregadsme1.2.01 of 3See more

cubestore gadsme 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
cubejs/cubestore:v1.5.334ac523a9bab
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,055
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
hivemq/hivemq-operator:4.7.10241d6a8e1963
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed

Open the chart page →

7,968
cassandrakubelauncherVerified publisher0.1.271 of 1See more

cassandra kubelauncher 0.1.27

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/cassandradigest-pinnedb66aba320083
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

1,518
etcdkubelauncherVerified publisher0.4.31 of 1See more

etcd kubelauncher 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/etcddigest-pinned8ab954711fb9
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

828
kafkakubelauncherVerified publisher0.1.261 of 1See more

kafka kubelauncher 0.1.26

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/kafkadigest-pinned43e1085cd0a8
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

1,414
keycloakkubelauncherVerified publisher0.4.41 of 1See more

keycloak kubelauncher 0.4.4

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/keycloakdigest-pinnedafe3bd73d7cf
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

1,306
kubectlkubelauncherVerified publisher0.2.111 of 1See more

kubectl kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/kubectldigest-pinned7280594a2f18
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

1,273
mariadbkubelauncherVerified publisher0.5.71 of 1See more

mariadb kubelauncher 0.5.7

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mariadbdigest-pinnede25056a6ec52
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

1,117
mongodbkubelauncherVerified publisher0.4.51 of 1See more

mongodb kubelauncher 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mongodbdigest-pinned9bc37ed78a8b
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

1,396
openldapkubelauncherVerified publisher0.2.01 of 1See more

openldap kubelauncher 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/openldapdigest-pinned8978aa002bc0
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

1,295
rabbitmqkubelauncherVerified publisher0.2.111 of 1See more

rabbitmq kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/rabbitmqdigest-pinnedff5a36a457f1
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed

Open the chart page →

1,134
rediskubelauncherVerified publisher0.5.11 of 1See more

redis kubelauncher 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/redisdigest-pinnedbcd8e9a6224f
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

824
zookeeperkubelauncherVerified publisher0.2.111 of 1See more

zookeeper kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/zookeeperdigest-pinned7826e9caa461
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

1,043
minecraft-proxyminecraft-server-chartsVerified publisher3.10.01 of 1See more

minecraft-proxy minecraft-server-charts 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
itzg/bungeecord:latest1c59f9631f3b
zlib@1:1.3.dfsg+really1.3.1-1ubuntu3
no fix listed

Open the chart page →

3,163
openclawopenclawVerified publisher1.91.51 of 2See more

openclaw openclaw 1.91.5

1 of the 2 container images this version deploys carry CVE-2026-85091.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
zlib@1:1.3.dfsg-3.1ubuntu2.2
no fix listed

Open the chart page →

3,030

Container images carrying it

2,608 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
zlib@1:1.2.11.dfsg-2ubuntu1.2
no fix listed
1
ghcr.io/feresberbeche/alertigate:1.2.1628d49e0e01b
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/firecrawl/firecrawl:2.11.34132de0537d308
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/flanksource/mission-control-ai-assistant:1.0.1229a635cbeeb5
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/fluent/fluentd-aggregator-docker-image:2.1.0ad25916eebbb
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
ghcr.io/gamosoft/notediscovery:0.31.5c06aa0fa9a85
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/getsentry/relay:26.7.2cd29b88c1d72
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/getsentry/snuba:26.7.210f8d164109b
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/gla-rad/mc-mms-edgerouter:latest3620d5680775
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/glassflow/glassflow-notifier:v1.0.3d1b0ce10b513
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/glauth/glauth:v2.5.209c782ca5984
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/goauthentik/server:2026.8.2ff8489a5af4f
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/gregperlinli/certvault:2.12.0a7d0cc9e260a
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/grycap/im:latest06a16d4f279f
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
zlib@1:1.2.11.dfsg-2ubuntu1.3
no fix listed
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/home-operations/plex:1.43.1a9c3723cb31c
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.3ad950d30878e
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/hypolia/kanri:0.1.2-rc4fa7d5cc7fb7d
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/icegatetech/icegate-ingest:0.1.1bae3c441894a
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/icegatetech/icegate-maintain:0.1.193e85b2b76ee
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/icegatetech/icegate-query:0.1.17542b4e7fff2
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/icoretech/codex-pooler:0.7.81bebc7e4a770
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/iisas/domino-rest:latest3009350bfc11
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
zlib@1:1.3.dfsg-3.1ubuntu2.1
no fix listed
1
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghcr.io/immich-app/immich-server:v3.2.279cc1623323d
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
zlib@1:1.3.dfsg+really1.3.1-1+b1
no fix listed
1
ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw:latest0e05a7b49c33
zlib@1:1.2.11.dfsg-2ubuntu9.2
no fix listed
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
zlib@1:1.2.13.dfsg-1
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.